NetSight
high8.2

CVE-2026-16933

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), …

Impact

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

Affected products

VendorProductAffected versions
IbmPower System S1122 \(9824-22a\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1124 \(9824-42a\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1122s \(9824-22b\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1114 \(9824-41b\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System L1122 \(9856-22h\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System L1124 \(9856-42h\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System E1150 \(9043-Mru\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1112 \(9242-21b\) Firmware
Version fw1120.00
IbmPower System S1112 \(9242-21t\) Firmware
Version fw1120.00
IbmPower System E1080 \(9080-Hex\) Firmware
from fw1060.00 before fw1060.81
IbmPower System S1022 \(9105-22a\) Firmware
from fw1060.00 before fw1060.81
IbmPower System S1024 \(9105-42a\) Firmware
from fw1060.00 before fw1060.81

Weakness classification

References